{"action":"Upgrade org.springframework.security.oauth:spring-security-oauth to 2.0.18.RELEASE (2.0.x), 2.1.5.RELEASE (2.1.x), 2.2.5.RELEASE (2.2.x) or 2.3.6.RELEASE (2.3.x) or later.","affected":[{"fixed":"2.0.18.RELEASE","introduced":"2.0.0.RELEASE"},{"fixed":"2.1.5.RELEASE","introduced":"2.1.0.RELEASE"},{"fixed":"2.2.5.RELEASE","introduced":"2.2.0.RELEASE"},{"fixed":"2.3.6.RELEASE","introduced":"2.3.0.RELEASE"}],"component":"org.springframework.security.oauth:spring-security-oauth","cve_ids":["CVE-2019-11269"],"ecosystem":"Maven","epss":0.08906,"exploited":false,"fixed_versions":["2.0.18.RELEASE","2.1.5.RELEASE","2.2.5.RELEASE","2.3.6.RELEASE"],"ghsa_id":"GHSA-mmf6-6597-3v6m","id":"tcs_01M5N95DTB7JAHAJZFYM2Q12SX","modified_at":"2024-05-14T17:13:19.405767Z","published_at":"2019-06-13T20:18:28Z","references":["https://osv.dev/vulnerability/GHSA-mmf6-6597-3v6m","https://nvd.nist.gov/vuln/detail/CVE-2019-11269","https://pivotal.io/security/cve-2019-11269","https://www.oracle.com/security-alerts/cpujan2021.html","http://packetstormsecurity.com/files/153299/Spring-Security-OAuth-2.3-Open-Redirection.html"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-mmf6-6597-3v6m","url":"https://osv.dev/vulnerability/GHSA-mmf6-6597-3v6m"}],"summary":"Open Redirect in Spring Security OAuth"}